建筑物和土木工程信息的组织和数字化 包括建筑物信息模型（BIM）.使用建筑物信息模型的信息管理.第5部分:信息管理的安全方法

[中文适用范围]： 本文件规定了成熟阶段的安全信息管理原则和要求，该阶段被描述为“根据 ISO 19650 系列的建筑信息模型 (BIM)”，并定义在 ISO 19650-1 中，以及作为任何其他计划、项目、资产、产品或服务的一部分或与之相关而获取、创建、处理和存储的敏感信息的安全管理。它介绍了在有权访问敏感信息的组织中创建和培养适当且相称的安全思维和文化所需的步骤，包括需要监控和审计合规性。概述的方法适用于获取、创建、处理和/或存储敏感信息的计划、项目、资产、产品或服务的整个生命周期，无论是计划中的还是现有的。本文件旨在供任何参与在建筑环境中创建、设计、建造、制造、运营、管理、修改、改进、拆除和/或回收资产或产品以及提供服务的信息管理和技术使用的任何组织使用。对于那些希望保护其商业信息、个人信息和知识产权的组织来说，这也将引起他们的兴趣和关注。 [外文原描述]： This document specifies the principles and requirements for security-minded information management at a stage of maturity described as "building information modelling (BIM) according to the ISO 19650 series", and as defined in ISO 19650-1, as well as the security-minded management of sensitive information that is obtained, created, processed and stored as part of, or in relation to, any other initiative, project, asset, product or service. It addresses the steps required to create and cultivate an appropriate and proportionate security mindset and culture across organizations with access to sensitive information, including the need to monitor and audit compliance. The approach outlined is applicable throughout the lifecycle of an initiative, project, asset, product or service, whether planned or existing, where sensitive information is obtained, created, processed and/or stored. This document is intended for use by any organization involved in the use of information management and technologies in the creation, design, construction, manufacture, operation, management, modification, improvement, demolition and/or recycling of assets or products, as well as the provision of services, within the built environment. It will also be of interest and relevance to those organizations wishing to protect their commercial information, personal information and intellectual property.